RootkitRevealer is an advanced rootkit detection utility. It runs on Windows NT 4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit. RootkitRevealer successfully detects all persistent rootkits published at www.rootkit.com, including AFX, Vanquish, HackerDefender and a fresh rootkits (TDSSserv, w32.tidserv)
-
-
Autoruns – Hunt down autostart programs wherever they hide
Upon installation, many applications configure themselves to start automatically when you log on. Applications do this so that they can automatically check for updates, because they use system tray icons to interact with users, or because they add functionality to Windows components such as Windows Explorer. However, most such applications don’t ask permission before inserting
-
MVPS Hosts File – You can use a HOSTS file to block ads, banners, cookies, web bugs, and even most hijackers
The MVPS Hosts file contains the mappings of IP addresses to host names. You can use it to block ads, banners, cookies, web bugs, and even most hijackers. This is accomplished by blocking the Server that supplies these little gems. Example – the following entry 127.0.0.1 ad.doubleclick.net blocks all files supplied by the DoubleClick Server
-
Ewido security suite 3.5 – Complement your existing protection system today
Ewido anti-spyware 4.0 will now continue under the new product name AVG Internet Security. AVG Internet Security is comprehensive real-time protection against all Internet threats. AVG Internet Security offer you realtime protection against these threats. Hijackers and Spyware. Secure surfing in the Internet without fear of annoying changes of the start page of your browser,
-
MS05-051 POC Exploit
A proof of concept (PoC) exploit was released against systems vulnerable to MS05-051. MS05-051 was released in October. The vulnerability does allow for arbitrary code execution in systems with the Microsoft Distriuted Transaction Coordinator (MSDTC) enabled. In order to disable MSDTC, enter the following command: sc stop MSDTC & sc config MSDTC start= disabled By
-
How to detect keylogger on my computer ?
Why Keyloggers Threaten Your Privacy 1. Surveillance software is very common nowadays. A Google search on keyloggers yields 39,000+ results. 2. Software mentioned in (1) has a bunch of features to record your activity in every possible way. See some features here. 3. Due to their “good purpose”, keyloggers and other types of surveillance software
-
Update Spybot S&D Detection Rules, 11/25/2005
Dialer + DialerPlatform Hijacker + CoolWWWSearch.SearchAssistant + Smitfraud-C. + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL Keylogger + Phoenix Malware + VirtuMonde + SintCorporation PUPS + Download Accelerator Plus Trojan + Z-Quest Update your SpyBot now
-
How to Remove Trojan Vundo / Winfixer / Virtumonde?
VirtuMonde is an adware program that downloads and displays popup advertisements. It may also hijack the browser to unwanted advertising related sites. There is a free removal tool offered by Symantec here: http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.removal.tool.html Follow the removal directions on the download page. Run the tool twice with a reboot inbetween to be sure it got everything.
-
New Version of MYTOB is causing an escalation of Risk Alert
We just received notification that Trend Micro has raised the Alert for the new MYTOB virus to medium. Trend Micro has an excellent write up at: Mytob.MX The worm appears to be memory resident and spreads by sending a copy of itself as an attachment (account-password.zip) in an email message using its own Simple Mail
-
CounterSpy Protects Against New Spyware Keylogger
The spyware keylogger, named Srv.SSA-KeyLogger, secretly steals data from users’ Internet sessions, including logins and passwords from online banking sessions, eBay, PayPal, and other programs that use html forms to collect personal information. It is a new variant of existing Trojans known by a variety of names, including Troj/Dumaru-BD, Troj/Dumaru-ALTroj/Dumaru-BO, BackDoor-CCT.gen, and Backdoor.Nibu.L. Note that
 |
 |
 |
